Malicious apps got into the Arch User Repository - how to protect yourself

Arch Linux AUR hit by malware targeting developer secrets

Attackers hijacked over 1,500 packages in Arch Linux's AUR to plant a credential stealer. The official repos are safe, but the trust model took the hit.